[apparmor] [Patch] cleanup usr.sbin.nscd profile

[Kshitij Gupta]

Hello,

This patch removes rules covered by abstractions in nscd profile:
- the network rules are in abstractions/nameservice
- @{PROC}/filesystems is in abstractions/base
- /{,var/}run/avahi-daemon/socket is in abstractions/nameservice
- /tmp/.winbindd/pipe and /var/lib/samba/winbindd_privileged/pipe are
in abstractions/winbind via abstractions/nameservice


=== modified file 'profiles/apparmor.d/usr.sbin.nscd'
--- profiles/apparmor.d/usr.sbin.nscd 2013-10-09 03:45:16.499650328 +0530
+++ profiles/apparmor.d/usr.sbin.nscd 2013-10-09 03:46:10.806646997 +0530
@@ -21,16 +21,10 @@
   capability setgid,
   capability setuid,

-  network inet dgram,
-  network inet stream,
-
   /etc/netgroup r,
   /etc/nscd.conf r,
-  /tmp/.winbindd/pipe rw,
   /usr/sbin/nscd rmix,
-  /var/lib/samba/winbindd_privileged/pipe rw,
   /{,var/}run/.nscd_socket wl,
-  /{,var/}run/avahi-daemon/socket w,
   /{,var/}run/nscd/ rw,
   /{,var/}run/nscd/db* rwl,
   /{,var/}run/nscd/socket wl,
@@ -41,7 +35,6 @@
   @{PROC}/@{pid}/fd/* r,
   @{PROC}/@{pid}/maps r,
   @{PROC}/@{pid}/mounts r,
-  @{PROC}/filesystems r,

   # Site-specific additions and overrides. See local/README for details.
   #include <local/usr.sbin.nscd>


Regards,

Kshitij Gupta